UNITED STATES PATENT APPLICATION 



METHOD AND APPARATUS FOR ENABLING CONTEXT AWARENESS 

IN A WIRELESS SYSTEM 



INVENTORS: 

Johnny Chen 
Uttam K. Sengupta 

John W. Sherry 
Nikhil M. Deshpande 



Law Offices of John C. Scott, LLC 
7860 North Hayden Road, Suite LLL102 
Scottsdale, AZ 85258 

Attorney Docket No.: 1000-0043 
Client Reference No.: P19100 



METHOD AND APPARATUS FOR ENABLING CONTEXT 
AWARENESS IN A WIRELESS SYSTEM 



5 TECHNICAL FIELD 

The invention relates generally to wireless communications and, more 
particularly, to techniques and structures for implementing context awareness within 
wireless systems. 



10 BRIEF DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a block diagram illustrating an example wireless arrangement in 
accordance with an embodiment of the present invention; 

Fig. 2 is a flowchart illustrating an example method for use in operating a 
wireless device in accordance with an embodiment of the present invention; 
15 Fig. 3 is a flowchart illustrating an example method for use in operating a 

wireless device in accordance with another embodiment of the present invention; 

Fig. 4 is a block diagram illustrating an example wireless arrangement in 
accordance with another embodiment of the present invention; and 

Fig. 5 is a flowchart illustrating an example method for use in managing 
20 unauthorized use of a wireless device within a network environment in accordance with 
an embodiment of the present invention. 



DETAILED DESCRIPTION 
In the following detailed description, reference is made to the accompanying 
25 drawings that show, by way of illustration, specific embodiments in which the 
invention may be practiced. These embodiments are described in sufficient detail to 
enable those skilled in the art to practice the invention. It is to be understood that the 
various embodiments of the invention, although different, are not necessarily mutually 
exclusive. For example, a particular feature, structure, or characteristic described 
30 herein in connection with one embodiment may be implemented within other 
embodiments without departing from the spirit and scope of the invention. In addition, 
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it is to be understood that the location or arrangement of individual elements within 
each disclosed embodiment may be modified without departing from the spirit and 
scope of the invention. The following detailed description is, therefore, not to be taken 
in a limiting sense, and the scope of the present invention is defined only by the 
5 appended claims, appropriately interpreted, along with the full range of equivalents to 
which the claims are entitled. In the drawings, like numerals refer to the same or 
similar functionality throughout the several views. 

Fig. 1 is a block diagram illustrating an example wireless arrangement 40 in 
accordance with an embodiment of the present invention. As illustrated, the wireless 

10 arrangement 40 includes a wireless device 10 that may communicate with a remote 
wireless access point (AP) 30 (or other remote wireless entity) via a wireless link. The 
wireless device 10 may include any form of mobile or portable wireless device or 
structure that is capable of communicating with a remote network or system including, 
for example, a cellular telephone or other handheld wireless communicator, a laptop, 

1 5 palmtop, or tablet computer having wireless networking functionality, a personal digital 
assistant (PDA) having wireless networking functionality, a pager, and/or others. The 
AP 30 is operative for providing wireless access to a network for one or more wireless 
devices in a vicinity thereof. In the illustrated embodiment, the AP 30 is coupled to (or 
includes) a network access authorization unit 32 for use in determining whether to grant 

20 the wireless device 10 access to an associated network 34. In a cellular-type 
communication system application, the AP 30 may represent a cellular base station or 
the like. The network 34 may include any type of network that a wireless user may 
desire to access including, for example, a private network, a public network, a wireless 
network, a wired network, a local area network (LAN), a municipal area network 

25 (MAN), a wide area network (WAN), a public switched telephone network (PSTN), the 
Internet, and/or others, including combinations of the above. 

As illustrated in Fig. 1, the wireless device 10 may include one or more of the 
following: a controller 12, a biometric authentication unit 14, one or more biometric 
sensors 1 6, 1 8, 20, a storage medium for storing user profiles 22, a wireless transceiver 

30 24, a user interface 26, and an accelerometer 28. The controller 12 is operative for 
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controlling the overall operation of the wireless device 10. The controller functionality 
may be implemented within, for example, one or more digital processing devices. The 
wireless transceiver 24 is operative for supporting wireless communication with one or 
more remote wireless entities. In at least one embodiment, the wireless transceiver 24 
5 may be configured in accordance with one or more wireless standards including, for 
example, one or more wireless cellular standards and/or one or more wireless 
networking standards. The wireless transceiver 24 may be coupled to one or more 
antennas 36 to facilitate the transmission and reception of wireless signals. Any type of 
antenna(s) may be used including, for example, a dipole antenna, a patch antenna, a 

10 helical antenna, an antenna array, and/or others. Other types of transducers may 
alternatively be used (e.g., an infrared (IR) diode in an IR based system, etc.). 

The user interface 26 is operative for providing an interface between a user and 
the device 10. The user interface 26 may include structures such as, for example, a 
keyboard, a liquid crystal display (LCD), a speaker, a microphone, a mouse, a stylus, 

1 5 and/or any other form of device or structure that allows a user to input information or 
commands to the device 1 0 or receive information or responses from the device 1 0. As 
will be appreciated, the specific types of input/output devices that are used will depend 
upon the type of wireless device at issue. 

The biometric sensors 16, 18, 20 are sensors that are capable of collecting 

20 biometric information from a user that is currently holding the device 10. As used 
herein, the term "biometric" relates to methods and structures for recognizing a person 
based on physiological and/or behavioral characteristics. The biometric sensors 1 6, 1 8, 
20 are therefore capable of measuring such characteristics. The biometric sensors 16, 
18, 20 may include, for example, a fingerprint sensor, a skin temperature sensor, a skin 

25 texture sensor, a hand geometry sensor, a heartbeat sensor, a retinal scanner, a voice 
print sensor, a microphone to detect audio cues, a camera or other structure to detect 
visual cues, and/or others. In at least one embodiment, a biometric sensor may be 
separate from the wireless device and, therefore, the user does not have to be holding 
the device to be biometrically authenticated. For example, a user may use a wireless 

30 headset (e.g., a Bluetooth headset, etc.) to make a telephone call, without having to hold 
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the telephone itself. The headset can collect voice print information about the user and 
transmit it back to the telephone for use in user authentication. Many other alternatives 
also exist. 

The biometric authentication unit 14 is operative for determining whether a 
5 person currently holding the device 10 is authorized to use the device 1 0, based on the 
collected biometric information. The biometric authentication unit 14 may perform 
this function by, for example, comparing the collected biometric information (or a 
derivative thereof) to stored information associated with each authorized user. For 
example, collected fingerprint information may be compared to stored fingerprint 

10 information for each authorized user, etc. The biometric authentication unit 14 may 
require a match for a single type of collected information (e.g., fingerprint only) or for 
multiple different types of collected information (e.g., fingerprint, skin texture, etc) 
before determining that a person currently holding the device is a specific authorized 
user. However, a match may not be required for all available biometric information to 

1 5 make a determination of authenticity. For example, it may only be required that two 
types of information out of four produce a match to determine that a user is authentic. 
In at least on embodiment, biometric authentication techniques are combined with one 
or more conventional authentication techniques (e.g., passwords, input codes, etc.) in 
order to authenticate a user. 

20 In at least one embodiment of the invention, the functionality for performing the 

biometric authentication is not located within the wireless device 1 0 itself. That is, the 
functionality may be located remote from the device 10 (e.g., within the AP 30, etc.). 
In such an embodiment, the wireless device 10 may cause the collected biometric 
information (or a derivative thereof) to be delivered to the external location, via 

25 wireless link, for processing. An authentication result may then be received from the 
external location indicating whether the person currently holding the device 10 is 
authorized to use the device 10. 

In at least one implementation, multiple users may be authorized to use the 
wireless device 10. In such an implementation, a separate profile may be maintained 

30 within the device 1 0 for each of the authorized users. A user's profile may include, for 
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example, network information, service directories, device input/button configurations 
(e.g., for different commands), input/output (I/O) preferences (e.g., visual, motion 
(vibrate), audio preferences), I/O configuration (e.g., screen color, skins, themes, sound 
cues and themes, etc.), personal data (e.g., phone numbers, references, etc.), and/or 
5 other types of information. A storage medium 22 may be provided for use in storing 
the user profiles. Any type of storage medium may be used including; for example, a 
semiconductor memory device (e.g., an erasable programmable read only memory 
(EPROM), an electrically erasable programmable read only memory (EEPROM), a 
flash memory, etc.), a magnetic disk drive, and/or others. The storage medium 22 may 

1 0 also have other uses within the device 1 0 in addition to storing profiles. After a person 
holding the device 10 has been authenticated, the controller 12 may retrieve a profile 
from the storage medium 22 for use in, for example, tailoring device operation to that 
user. The profile may, for example, be loaded within a processor memory (e.g., a 
random access memory). 

15 After a person holding the device 10 has been authenticated by the biometric 

authentication unit 14, the controller 12 may attempt to access the network 34. In one 
possible approach, the controller 12 may cause an access request to be transmitted to 
the AP 30 using the wireless transceiver 24. The access request may include the 
authenticated identity of the party currently holding the device 10 (or the AP 30 may 

20 request this information in a reply message). To determine whether network access 
should be granted, the AP 30 may utilize the network access authorization unit 32. The 
network access authorization unit 32 may compare the authenticated identity 
information received from the device 10 to a list of authorized network users to make 
the determination. In another possible approach, the wireless device 10 may send the 

25 collected biometric information for a person currently holding the device 10 (or a 
derivative thereof) to the AP 30 for use in network access authorization. The AP 30 
may then trigger the network access authorization unit 32 which will compare the 
collected biometric information to stored user-specific information to determine 
whether the person is someone that is authorized to use the network 34. After network 
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access has been granted, the device 1 0 will enable the user currently holding the device 
10 to access the network 34. 

In some implementations, the network 34 may include multiple different 
portions and/or services, each requiring independent authorization. In such an 
5 embodiment, the network access authorization unit 32 may be configured to 
individually authorize access to each network portion or service. For a particular user, 
therefore, access may be granted to some network portions or services and not others. 
For example, access to a private network portion may be granted while access to the 
Internet is denied or access to printing services may be granted while access to 

10 facsimile services is denied. 

In at least one embodiment of the invention, the operational characteristics of a 
wireless device are made dependent upon whether or not the device is presently being 
held by a user. That is, when the device is being held by a user, the wireless device may 
operate in accordance with one group of operational characteristics and, when the 

15 device is not being held by a user, the device may operate in accordance with another 
group of operational characteristics. For example, when a device is picked up, the 
device may automatically be placed within a normal power mode of operation (e.g., the 
device may be woken up from a sleep or standby mode, etc.). When the device is 
placed down, it may automatically be placed in a power save mode of operation (e.g., a 

20 sleep mode, a standby mode, etc.). The power save mode may be achieved, for 
example, by disabling certain functions or components that are normally active within 
the device. Various stages of low power mode may also exist, with each one being 
entered, for example, a predetermined period of time after the device is set down. 
Similarly, when the device is placed down, any user authentications and/or network 

25 authorizations that have previously been granted may be dropped. 

A grace period may be initiated after a device is placed down before user 
authentications and/or network authorizations are dropped. For example, if a user has 
already been authenticated and granted network access and the user temporarily places 
the wireless device down (to, for example, retrieve a pen to write down a number, etc.), 

30 then the connection will still be available when the device is picked back up as long as 
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it is done within a set time period. The length of the grace period may be selected so 
that situations where an unauthorized user is granted access will be avoided. 

Other operational characteristics of a wireless device may also (or alternatively) 
change based on whether the device is being held. For example, if the device is a 
5 cellular telephone, a method of notifying a user of an incoming call may change (e.g., 
vibration when the device is being held and audible ringing when the device is not 
being held, etc.). Other changes may also be made. 

To determine whether the device 1 0 is currently being held or not, one or more 
detection techniques may be used. For example, as shown in Fig. 1, in at least one 

10 embodiment of the invention, an accelerometer 28 is provided within the wireless 
device 10. The accelerometer 28 may track the current physical acceleration of the 
device 10 and feed this information to the controller 12. The controller 12 may then 
compare the acceleration information to acceleration profiles known to be associated 
with the act of picking up the device 10. Other types of acceleration profiles may also 

15 be stored within the device 1 0 for use determining that the device is not being held. For 
example, if the wireless device is currently within a user's pocket, the device 10 will be 
subjected to a relatively predictable (e.g., periodic, etc.) form of physical acceleration. 
If the device is then taken out of the user's pocket and lifted, for example, to the user's 
ear, another relatively predictable form of acceleration will occur, and so on. In another 

20 possible approach for determining whether a device is currently being held, biometric 
readings from one or more of the biometric sensors 16, 18, 20 may be used. For 
example, a fingerprint sensor may generate a different output level when a person is 
touching it than when it is not being touched. Similarly, a skin temperature sensor will 
output temperature readings in a different range when it is in direct contact with skin 

25 than when it is not. In yet another possible approach for determining whether a device 
is currently being held, some form of electrical measurement may be made that is not 
necessarily a biometric reading. For example, the electrical reactance of an outer shell 
of the device 10, or some other portion thereof, may be measured. The reactance may 
fall within a different range when the device is being held by someone then when it is 

30 not being held. Other techniques for determining whether the device 10 is being held 
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may alternatively be used. In at least one approach, multiple different techniques are 
combined to detect whether the device is being held. 

Fig. 2 is a flowchart illustrating an example method 50 for use in operating a 
wireless device in accordance with an embodiment of the present invention. The 
5 method 50 is initiated when it is sensed that the wireless device has been picked up by a 
user (block 52). Any method may be used to determine that the device has been picked 
up (including those described above). A normal power mode of the device is then 
enabled (block 54). While the device was not being held, the device may have been 
within a power save mode that removed or reduced power to one or more components 

10 (e.g., a wireless transmitter, a wireless receiver, an LCD display, etc.) within the device. 
When the normal power mode is enabled, normal operational power may be restored to 
some or all of these components. Biometric authentication of the user holding the 
device may also be performed at this time to determine whether the user holding the 
device is a person that is authorized to use the device (block 56). If the biometric 

1 5 authentication fails, the device may wait a predetermined period of time (block 58) and 
then attempt to authenticate the user again. This may be repeated until the user 
currently holding the device is authenticated or the device is put down by the user. The 
device may also deactivate some or all user functions at this time (if they haven't been 
deactivated already). 

20 If the biometric authentication is successful, it is next determined whether the 

user currently holding the wireless device is authorized to use a network (block 60). 
The network may be any network that is within range of the wireless device. A network 
access authorization function maybe consulted to determine whether the biometrically 
identified user has rights to use the network. If the network authorization procedure 

25 fails, the user may be prompted (e.g., paged, etc.) to indicate same (block 62). 
Instructions may also be given to the user at this time to indicate what needs to be done 
to establish or reestablish network access rights. Because the biometric authentication 
of the user was successful, the user may be granted access to local functions in the 
device at this time (i.e., functions within the device itself, such as retrieving stored 

30 information, performing calculations, etc.) (block 64). In an alternative approach, the 
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local functions may be enabled right after the biometric authentication is deemed 
successful (e.g., between block 56 and block 60 in Fig. 2). In still another possible 
approach, the local functions may be enabled as long as the device is being held. 
However, in at least one embodiment, access is only given to local functions that do not 
5 expose sensitive user data, such as contact list, e-mail, calendar, bookmarks, etc. In 
other embodiments, no local function access (or just emergency functions (e.g., 91 1)) 
is granted unless network authorization has been established. 

If the network authorization procedure is successful, a user profile that 
corresponds to the biometrically authenticated user may be loaded into a processor 

10 memory within the wireless device (block 66). As discussed previously, this user 
profile may be used to tailor operation of the device to the corresponding user. In an 
alternative approach, the profile may be loaded into memory just after the biometric 
authentication is deemed successful, but before the network authorization process is 
performed (e.g., between block 56 and block 60 in Fig. 2). In at least one embodiment 

15 of the invention, user-specific profiles are not used. If the network authorization 
procedure is successful, both local functions and network based functions may be 
enabled in the device for the user (block 68). While the user uses the device, the 
biometric authentication process may be performed continuously, periodically, or 
repeatedly. If the authentication fails during this time (e.g., an authorized user hands 

20 the device to an unauthorized user, etc.), the local functions and network specific 
functions may be disabled until the authenticity of the user holding the device is 
reestablished. 

Fig. 3 is a flowchart illustrating an example method 70 for use in operating a 
wireless device in accordance with an embodiment of the present invention. The 

25 method 70 is initiated when it is sensed that the wireless device is no longer being held 
by a user (block 72). If there has been any previous user authentication and/or network 
authorization associated with the wireless device, they may be dropped at this time 
based on the wireless device no longer being held (block 74). Alternatively, the 
wireless device may wait for a predetermined period of time after sensing that the 

30 wireless device is no longer being held to drop the user authentication and network 
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authorization to provide for situations where a user temporarily places a device down 
and then picks it back up. Also at this time, a power save mode of the wireless device 
may be enabled (block 76). During power save mode, various components and/or 
functions of the wireless device may be disabled to reduce power consumption within 
5 the device. 

It is subsequently determined whether the power level within the device is 
sufficient for performing one or more back ground functions (block 78). The 
background functions may include functions such as, for example: performing data 
backups to a network based storage location, performing synchronization, location 

10 based features, remote management, software upgrades, heartbeat, and/or others. 
Because the device may be operating in power save mode at this point, the available 
power may not be sufficient for, for example, communicating reliably with a remote 
access point. If the power level is not sufficient, the device may wait (block 80) and 
check the power situation again later. The device may, for example, become closer to 

15 an access point so that reliable communication can be supported at a present power 
level. In another possible approach, the power may be temporarily increased to carry 
out the background functions. If the power is determined to be sufficient, the device 
may then seek to gain access to the network to perform the background functions (block 
82). If the network access authorization procedure fails, the device may then remain 

20 idle within the power save mode until it is later picked up by a user (block 84). If the 
network authorization procedure is successful, on the other hand, the background 
functions may be enabled and permitted to proceed (block 86). 

The method 50 of Fig. 2 and the method 70 of Fig. 3 may be implemented 
within, for example, the controller 12 of Fig. 1 or within other device controllers. In at 

25 least one implementation, a wireless device may switch between the two methods 50, 
70 based on the current status of the device (i.e., held or not held). For example, a 
wireless device may be operating somewhere within the method 50 of Fig. 2 when the 
wireless device is placed down by the user, thereby initiating the method 70 of Fig. 3. 
Similarly, the wireless device may be operating somewhere within the method 70 of 

30 Fig. 3 when the wireless device is picked up by a user, thereby initiating the method 50 
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of Fig. 2. As will be appreciated, many alternative operational sequences may also be 
implemented in accordance with invention. 

It is not uncommon for a wireless device to be lost or stolen and for an 
unauthorized party to subsequently attempt to use the device. In at least one aspect of 
5 the present invention, techniques and structures are presented for effectively dealing 
with such circumstances. Fig. 4 is a block diagram illustrating an example wireless 
arrangement 90 in accordance with an embodiment of the present invention. As 
illustrated, the wireless arrangement 90 includes a wireless device 92 that may 
communicate with a remote wireless access point (AP) 94 (or other wireless entity) via 

10 wireless link. The wireless device 92 may be similar to, or the same as, the wireless 
device 10 of Fig. 1. The AP 94 is coupled to, or includes, a network access 
authorization unit 96 for use in determining whether to grant the wireless device 92 
access to an associated network. Various techniques for determining whether to grant 
network access to a wireless device, including techniques that involve biometric 

1 5 authentication, have been discussed previously. Other techniques may alternatively be 
used. The network access authorization unit 96 may have access to a timer 98 for use 
in timing certain activities of the wireless device 92. 

The network access authorization unit 96 may also have access to an equipment 
identity register (EIR) 100, a backup server 102, and/or a mobile location server 104. 

20 The EIR 1 00 is a storage space within a network where a list of the identities of devices 
that have been reported lost or stolen is maintained. When a user believes that their 
wireless device has been lost or stolen, the user may contact a call center 1 10 to report 
the missing device. The call center 110 will then update the EIR 100 with the identity 
of the reported device. The network access authorization unit 96 may consult the EIR 

25 1 00 during the network access authorization process for a wireless device to make sure 
that the device has not been reported missing. The backup server 102 is operative for 
managing the backup of data from one or more wireless devices to a network based 
storage location. The mobile location server 104 is operative for tracking the physical 
locations of wireless devices within an associated system. The mobile location server 
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104 may be consulted by the network access authorization unit 96 to determine a 
current (or relatively recent) location of a device of interest. 

In at least one embodiment of the invention, after it has been determined that a 
particular wireless device has been reported lost or stolen, the network access 
5 authorization unit 96 may attempt to determine a physical location of the wireless 
device (by consulting, for example, the mobile location server 104, etc.)- If the wireless 
device is not located in an expected location (e.g., at the associated user's home, at the 
associated user's business, etc.), then the backup server 102 may be instructed to 
perform a data backup of information stored on the wireless device. A data destruct 

10 signal may then be delivered to the device to destroy the data on the device to prevent 
unauthorized parties from accessing the data. If the wireless device is located in an 
expected location, on the other hand, the device may simply be disabled without 
destroying the data. Reactivation instructions may also be delivered to the user (e.g., 
via page, email, etc.) to inform the user how to reactivate the wireless device once it has 

15 been found. In addition, in at least one approach, the user may be notified as to the 
location of the device as determined above (e.g., via email, etc.). 

The network access authorization unit 96 may be programmed to rescind 
network access for the wireless device 92 (assuming it has already been granted) when 
it is determined that the device 92 is no longer being held by a user. The device 92 

20 may, for example, detect that it has been placed down and send a signal to the network 
access authorization unit 96 (or some other network entity) indicating same. In at least 
one implementation, the network access authorization unit 96 will wait a predetermined 
amount of time after receiving notice that the wireless device 92 has been placed down, 
to rescind network access. If the wireless device 92 is picked up within that time 

25 period, the network access authorization unit 96 may refrain from rescinding network 
access for the wireless device 92. The network access authorization unit 96 may use the 
timer 98 to time this activity. 

Fig. 5 is a flowchart illustrating an example method 120 for use in managing 
unauthorized use of a wireless device within a network environment in accordance with 

30 an embodiment of the present invention. The method 1 20 may be implemented within, 
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for example, the network access authorization unit 96 of Fig. 4 or within other network 
locations. Unauthorized use of a wireless device is first detected (block 122). The 
unauthorized use may be detected, for example, by detecting repeated unsuccessful 
attempts to gain access to a network by the device. Once unauthorized use has been 
5 detected, it may be determined whether the device has been reported lost or stolen 
(block 124). This may be achieved, for example, by consulting an EIR or similar 
database within the network. If the device has not been reported lost or stolen, the 
device may simply be disabled (block 128). If the device has been reported lost or 
stolen, however, a location of the device may then be determined (block 130). In at 

1 0 least one embodiment, a mobile location server is consulted to determine a location of 
the device. Other means for determining current location may alternatively be used 
including, for example, using triangulation techniques, consulting a global positioning 
system (GPS) receiver within the device, etc. 

It is next determined whether the location of the wireless device is an expected 

15 location. An expected location is a location where a wireless device is likely to be 
during ordinary use. Expected locations of a device may include, for example, an 
associated user's home, an associated user's business location, etc.). The authorized 
user of a device may be asked to supply one or more expected locations of the device 
during, for example, an account setup process. If the location of the device is not an 

20 expected location, data stored on the device may be backed up to a network location 
(block 134). A data destruct signal may then be sent to the device to destroy some or 
all of the data stored therein (block 136). The device may then be disabled (block 138). 
If the location of the device is an expected location, the device may simply be disabled 
without destroying the data (block 140). The assumption in this case is that the device 

25 was simply misplaced, but is still within the control of the authorized user. 
Reactivation instructions may be delivered to the wireless device or the authorized user 
to instruct the user how to reactivate the wireless device once it is found (block 142). 

The techniques and structures of the present invention may be implemented in 
any of a variety of different forms. For example, features of the invention may be 

30 embodied within cellular telephones and other mobile communicators, pagers, portable 
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computers, PDAs, network interface cards (NICs) and other network interface 
structures, integrated circuits, wireless access points, network servers, as instructions 
and/or data structures stored on machine readable media, and/or in other formats. 
Examples of different types of machine readable media that may be used include floppy 
5 diskettes, hard disks, optical disks, CD-ROMs, magneto-optical disks, ROMs, RAMs, 
EPROMs, EEPROMs, magnet or optical cards, flash memory, and/or other types of 
media suitable for storing electronic instructions. In at least one form, the invention is 
embodied as a set of instructions that are modulated onto a carrier wave for 
transmission over a transmission medium. 

10 It should be appreciated that the individual blocks illustrated in the block 

diagrams herein may be functional in nature and do not necessarily correspond to 
discrete hardware elements. For example, with reference to Fig. 1, in at least one 
embodiment, two or more of the illustrated blocks within the wireless device 10 (e.g., 
the controller 12 and the biometric authentication unit 14) are implemented in software 

15 within a single (or multiple) digital processing device(s). The digital processing 
device(s) may include, for example, a general purpose microprocessor, a digital signal 
processor (DSP), a reduced instruction set computer (RISC), a complex instruction set 
computer (CISC), a field programmable gate array (FPGA), an application specific 
integrated circuit (ASIC), and/or others, including combinations of the above. 

20 In the foregoing detailed description, various features of the invention are 

grouped together in one or more individual embodiments for the purpose of 
streamlining the disclosure. This method of disclosure is not to be interpreted as 
reflecting an intention that the claimed invention requires more features than are 
expressly recited in each claim. Rather, as the following claims reflect, inventive 

25 aspects may lie in less than all features of each disclosed embodiment. 

Although the present invention has been described in conjunction with certain 
embodiments, it is to be understood that modifications and variations may be resorted 
to without departing from the spirit and scope of the invention as those skilled in the art 
readily understand. Such modifications and variations are considered to be within the 

30 purview and scope of the invention and the appended claims. 
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